Information processing apparatus, method of controlling the same, and storage medium

Abstract

A mechanism for ensuring security even when there is a possibility that an information processing apparatus capable of being operated from an external device via a network is connected to a global network. An information processing apparatus has a NIC section for connection a network, and can be remotely operated from an external device connected to the network. A CPU determines whether the network to which the NIC section is connected is a local network. If it is determined that the network to which the NIC is connected is not a local network, the CPU restrict remote operation from the external device.

1 . An information processing apparatus that has an interface unit connectable to a network and is capable of being operated from an external device via the network, comprising:
 a determination unit configured to determine whether or not the network to which the interface unit is connected is a local network; and   a restriction unit configured to restrict operation from the external device when said determination unit determines that the network to which the interface unit is connected is not a local network.   
     
     
         2 . The information processing apparatus according to  claim 1 , wherein said determination unit performs the determination based on an address space to which an IP address set to the information processing apparatus belongs. 
     
     
         3 . The information processing apparatus according to  claim 1 , further comprising a a second determination unit configured to determine a possibility that the network to which the interface unit is connected is a global network when said determination unit determines that the network to which the interface unit is connected is not a local network, and
 wherein said restriction unit stepwise restricts the operation from the external device according to the possibility determined by said second determination unit.   
     
     
         4 . The information processing apparatus according to  claim 3 , wherein said second determination unit sends out a predetermined signal via the interface unit, and performs the determination based on whether or not said judgment unit receives a response to the sent signal. 
     
     
         5 . The information processing apparatus according to  claim 4 , wherein when said judgment unit receives a response to the sent signal, said judgment unit recognizes a communication path to the external device having responded to the signal, and performs the judgment based on the recognized communication path. 
     
     
         6 . The information processing apparatus according to  claim 1 , wherein said restriction unit restricts an operation from the external device, which is to be performed for changing setting information of the information processing apparatus. 
     
     
         7 . The information processing apparatus according to  claim 1 , wherein said restriction unit restricts an operation from the external device, which is to be performed for manipulating address information stored in the information processing apparatus. 
     
     
         8 . The information processing apparatus according to  claim 1 , wherein said restriction unit restricts a remote operation from the external device, which is to be performed for manipulating a job executed by the information processing apparatus. 
     
     
         9 . The information processing apparatus according to  claim 1 , wherein said restriction unit automatically cuts off the connection to the network by the interface unit. 
     
     
         10 . The information processing apparatus according to  claim 1 , further comprising a notification unit configured to perform notification to a user of the information processing apparatus according to a result of determination by said determination unit. 
     
     
         11 . A method of controlling an information processing apparatus that has an interface unit connectable to a network and is capable of being operated from an external device via the network, comprising:
 determining whether or not the network to which the interface unit is connected is a local network; and   restricting operation from the external device when it is determined by said determining that the network to which the interface unit is connected is not a local network.   
     
     
         12 . A computer-readable storage medium that stores a program for causing a computer to execute a method of controlling an information processing apparatus that has an interface unit connectable to a network and is capable of being operated from an external device via the network,
 wherein the method comprises:   determining whether or not the network to which the interface unit is connected is a local network; and   restricting operation from the external device when it is determined by said determining that the network to which the interface unit is connected is not a local network.